use process monitor to tell when netsh stops

You can view the dynamic port range on a computer by using the following netsh commands: This increase is a change from the configuration of earlier versions of Windows that used a default port range of 1025 through 5000. The new default start port is 49152, and the new default end port is 65535.

To comply with Internet Assigned Numbers Authority (IANA) recommendations, Microsoft has increased the dynamic client port range for outgoing connections. When all the ports on a machine are used, we term it as port exhaustion. After some time, you'll notice that the connections will start to fail and one high possibility for this failure would be because the browser has used all the available ports to make connections outside and any new attempt to establish a connection will fail as there are no more ports available. In a scenario where the same browser is creating many connections to multiple websites, for any new connection that the browser is attempting, an ephemeral port is used. A browser on a client machine will use an ephemeral port to connect to on port 443. When a connection is being established with an application or service, client devices use an ephemeral port from the device to connect to a well-known port defined for that application or service. Custom application will also have their defined port numbers. For example, file server service is on port 445, HTTPS is 443, HTTP is 80, and RPC is 135. Well-known ports are the defined port for a particular application or service.Ephemeral ports, which are dynamic ports, are the set of ports that every machine by default will have them to make an outbound connection.Any application or a service that needs to establish a TCP/UDP connection will require a port on its side.

TCP and UDP protocols work based on port numbers used for establishing connection.

Use process monitor to tell when netsh stops